Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.mft
File: EpRi1FuKuV1MNcQCZbMbUr8ejb0.mft (raw, json)
Hash identifier: xuZHhBDTKE0YLUpLm5tcP5xu5sdO3S4t60fFM/h0LRY=
Subject key identifier: 5E:B1:44:05:BC:EF:84:BE:61:0D:04:0B:3A:0E:A9:A4:D6:CD:0C:8E
Authority key identifier: 12:94:62:D4:5B:8A:B9:5D:4C:35:C4:02:65:B3:1B:52:BF:1E:8D:BD
Certificate issuer: /CN=129462d45b8ab95d4c35c40265b31b52bf1e8dbd
Certificate serial: 019846640D8D4F00E73BDD48F125328357A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EpRi1FuKuV1MNcQCZbMbUr8ejb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.mft
Manifest number: 07FA
Signing time: Sat 26 Jul 2025 11:00:18 +0000
Manifest this update: Sat 26 Jul 2025 11:00:18 +0000
Manifest next update: Sun 27 Jul 2025 11:00:18 +0000
Files and hashes: 1: 1-zD-VP--H8n0NROM6_MEnlnoArY.roa (hash: nJouFHvYIjsuEwuLWeuvNkKf+hqux6O1NRmsIOTPhUc=)
2: EpRi1FuKuV1MNcQCZbMbUr8ejb0.crl (hash: /rtt3235BUIjWMj21rDlG8p+ldsYF+kmO2t0MSmPnp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/EpRi1FuKuV1MNcQCZbMbUr8ejb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:64:0d:8d:4f:00:e7:3b:dd:48:f1:25:32:83:57:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=129462d45b8ab95d4c35c40265b31b52bf1e8dbd
Validity
Not Before: Jul 26 11:00:18 2025 GMT
Not After : Jul 27 11:00:18 2025 GMT
Subject: CN=5eb14405bcef84be610d040b3a0ea9a4d6cd0c8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:38:74:92:45:ed:00:92:62:eb:f0:ce:ee:70:
63:12:69:03:f7:ee:28:c1:26:80:a1:45:88:86:e9:
47:88:61:32:66:e8:bb:48:14:f1:95:0a:2f:46:24:
4a:b3:57:09:ea:85:cc:7f:1b:35:2a:71:13:f1:80:
14:18:e1:e3:f0:97:f2:a3:7f:e1:3d:59:f4:00:fc:
9b:06:5a:31:8c:55:54:88:08:2a:10:fe:af:0e:b8:
80:2e:67:b7:b9:94:94:f9:82:ad:20:e9:50:41:cd:
72:8d:d8:d5:5c:3c:d6:91:a8:48:bd:e5:4b:4f:a4:
65:e8:bf:06:9d:fa:b8:7f:97:d6:46:0b:65:90:d4:
04:b9:b2:b4:d9:5d:af:18:e0:ab:ca:df:02:ac:a5:
47:3f:c4:db:e6:84:4a:6d:99:55:86:b9:be:36:e8:
65:75:de:4a:d3:8a:bf:3b:0d:06:39:33:88:1c:77:
bf:b4:db:85:62:4e:de:8a:ae:b1:dc:e0:53:84:74:
0e:67:1b:80:ff:f2:23:38:60:28:e3:e0:41:3c:c3:
da:02:06:a8:74:c7:53:48:d6:47:57:a1:f2:a7:a9:
5d:21:41:18:9f:7a:21:a4:ba:b1:38:bf:0e:57:18:
ea:b2:58:c3:71:37:7a:f5:05:03:8e:95:48:ed:a7:
8f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:B1:44:05:BC:EF:84:BE:61:0D:04:0B:3A:0E:A9:A4:D6:CD:0C:8E
X509v3 Authority Key Identifier:
keyid:12:94:62:D4:5B:8A:B9:5D:4C:35:C4:02:65:B3:1B:52:BF:1E:8D:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EpRi1FuKuV1MNcQCZbMbUr8ejb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:df:cb:44:44:26:67:c1:20:a2:c2:c8:e8:dc:c9:de:ab:fc:
f1:ec:38:b5:fd:66:65:3c:39:97:70:c4:32:50:9e:0b:39:c2:
49:e4:7a:da:d5:5a:c6:34:12:bc:1e:90:25:6a:88:d8:a7:22:
cd:31:0a:8d:48:b5:93:97:37:7b:4e:db:ee:49:68:27:38:45:
2d:1c:bd:e4:2c:88:6e:52:27:39:bc:b1:e4:20:91:5e:97:93:
4d:fb:16:5b:80:80:3b:8a:ec:a6:53:70:b4:e6:4d:db:27:df:
07:a9:9c:8f:0a:a6:8b:1d:10:6d:42:77:98:6d:fd:8a:c9:8d:
ba:f4:c3:aa:f9:4a:76:69:8e:7f:58:1d:b8:12:1b:d8:8e:bd:
a6:00:c7:49:af:0d:43:23:89:a5:2d:7c:96:85:df:1f:c7:eb:
d0:fe:77:d8:99:1a:7e:e5:24:a5:d0:89:43:c5:7a:49:fe:fe:
72:61:cf:4f:ef:64:02:93:7e:bb:99:d2:54:76:0e:49:7c:ca:
9c:3f:f0:87:27:b4:e4:8c:dd:7d:bb:b1:0d:1c:a8:74:50:e2:
bb:43:2b:f5:d5:a3:7e:48:d6:57:48:c8:cf:26:1e:dc:62:77:
2d:61:6c:65:b2:f8:36:de:a6:3a:e1:21:c0:09:87:1d:3b:be:
5b:88:fb:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:48:33 2025 by rpki-client